When it comes to credit card transactions, complying with state and federal privacy laws can be a challenge. And, in California, it can be a nightmare. That’s because California’s Song-Beverly Credit Card Act restricts businesses from requiring—or simply requesting—personal information, when the customer pays with a credit card.